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(57) Abstract: An access management apparatus and methcxl for managing or controlling access lo an extranet for xSR To overcome 
"the problems of centralized authority and authorization cache", the present invention dccentraJizes the role of access management 
by using ACL cached, and synchronizes the decentralized access management roles by using an A A server. In addition, it overcomes 
"inefficiency of session management" by adopting authentication/authorization based on a web browser cookie, and it additionally 
includes the functions of supporting the internet security standard, and processing a variety of securily/enciyplion techniques and a 
user-defined access management. 
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